Lucene search
MitreCVE-2022-35602HistoryAug 18, 2022 - 2:15 a.m.
CVE-2022-35602
2022-08-1802:15:08
CWE-89
mitre
web.nvd.nist.gov
36
4
cve-2022-35602
sql injection
userdao.java
sazanrjb
inventorymanagementsystem 1.0
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.3%
A SQL injection vulnerability in UserDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter user.
Affected configurations
Node
inventorymanagementsystem_projectinventorymanagementsystemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| inventorymanagementsystem_project | inventorymanagementsystem | 1.0 | cpe:2.3:a:inventorymanagementsystem_project:inventorymanagementsystem:1.0:*:*:*:*:*:*:* |
References
Social References
More
Related
cvelist
cvelist
CVE-2022-35602
2022-08-18 01:23:28
prion
prion
Sql injection
2022-08-18 02:15:00
nvd
nvd
CVE-2022-35602
2022-08-18 02:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
55.3%
Related for CVE-2022-35602